Protecting Data in S3 Buckets
Broadly, you can protect these via IAM Policies and via Encryption Default Encryption The objects are encrypted using server-side encryption with either Amazon S3-managed keys (SSE-S3) or customer…
Insights
Blog
GCP Foundation via Terraform
Google has put out a few examples of cloud foundational components – integrated into a single terraform solution that is called from a bootstrap module. Need an…
Backup and Recovery AWS, Azure or GCP
Backup and recovery conversations often get derailed. While everyone understands RTO and RPO, it is hard to apply these metrics in a granular fashion. To that end, it…
ADFS and SSO Federated Users in AWS
(Also see – Functional Roles and AWS managed policies) Permissions Set and SSO Groups SSO Groups are created within AWS IAM (they come directly from the IdP). The…
AWS Managed Policies for work functions
Keep in mind that anything with ‘Admin’ in it allows creation of other users as well as attaching / detaching policies to users. Anything with ‘user’ in it,…
Custom IAM Roles in GCP
Also read – Roles, IAM in GCP and AWS Managed Policies for On Premises Work Functions and Base Roles for Developers in GCP Can Anyone Create Custom Roles?…
AWS Custom Groups and (Managed) Policies Needed
This is meant to be a quick recap of some recommended custom AWS Groups and the included Managed Policies. A Network Admin Group AWS managed policy name: NetworkAdministrator A…
Oracle on AWS RDS
These are some field tips for migrating Oracle databases to AWS RDS (or custom EC2 instances). Tuning, Monitoring, Pricing, Backup tips are included. Often, a reference to the…